Privacy policy for the EXTRA Employee app

1. Who we are

The EXTRA Employee app is provided by EXTRA B.V. ("EXTRA", "we"), an intermediary for hospitality staff in the Netherlands. In this privacy policy we explain which personal data we process when you use the app, why we do so and what rights you have. If you have any questions, you can contact us at info@doehetextra.nl.

2. What data we process

Depending on how you use the app, we process the following data:

• Account data: your name, email address and telephone number.
• Work-related data: your role, your availability, the shifts you sign up for, hours worked and clock-in and clock-out times.
• Earnings: your all-in hourly rate and the pay per shift.
• Photos: photos that you take or upload yourself when completing a shift (for example a sign-out sheet).
• Location (place of residence): the place of residence you have provided, so that we can show you shifts in your area. The app does not track your location in the background.
• Device data: a notification token, so that we can send you push notifications about new and upcoming shifts.
• Calendar: only with your consent do we add your shifts to the calendar on your device. This data stays on your device.

3. What we use your data for

• To let you log in and to manage your account.
• To show you available shifts that suit you.
• To keep track of your sign-ups, hours worked and earnings.
• To keep you informed about shifts by push notification or email.
• To give clients the correct information about the employee scheduled for a shift.

4. Sharing with others

We never sell your data. We only share data where this is necessary:

• With the client (the hospitality business) where you work a shift, to the extent necessary for carrying out that shift.
• With service providers that help us make the app work, such as our email provider (for login and information emails) and our hosting provider (for securely storing data and uploaded photos). These parties may only process the data on our behalf.
• Where we are legally required to do so.

5. Retention period

We do not keep your data for longer than is necessary for the purposes set out above, or for as long as we are legally required to (for example for the records of hours worked). After that, we delete your data or anonymise it.

6. Security

Passwords are stored in encrypted form and all connections run over secure (HTTPS) connections. We take appropriate technical and organisational measures to protect your data.

7. Your rights

You have the right to access your data, to have it corrected or deleted, and to object to certain processing. You can have your account deleted by sending an email to info@doehetextra.nl. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Changes

We may amend this privacy policy from time to time. The most recent version is always available on this page, with the date of the last change shown at the top.

9. Contact

EXTRA B.V.

Email: info@doehetextra.nl